Legal · Privacy Policy
Privacy Policy
Audio Lounge is a recording studio and music community in Los Angeles, operated by Audio Lounge, LLC. This policy says what information the platform collects, why, who processes it for us, and the rights you have over it. It covers the website and the mobile apps.
Effective October 22, 2026 · Added how we use YouTube and TikTok data
What we collect
Account and identity
When you sign in with Google, our identity provider (Clerk) gives us your name, email address, and profile photo. Artist and studio-operator accounts authenticate through their own lanes (an email sign-in for artists; WorkOS for operators) and carry the role you were granted.
Booking details
Booking a session collects your name, email, optional phone number, the room and time you chose, any gift certificate code, and the typed signature you provide to accept the session terms. Cancellation and rescheduling use one-time codes sent to your email; opening those links never changes a booking by itself.
Payments
Checkout happens on Stripe's hosted pages. Your card number goes to Stripe, not to our servers; we receive the booking or membership it pays for, its amount, and its payment status. Stripe's own privacy policy governs the card data it processes.
Activity while signed in
Follows, saves, reposts, playlists, comments, notifications, and listening activity are recorded against your account so the product works: your library, rewards points, and community features are built from them. Your fan profile stays private unless you opt in to a public tastemaker profile, which is off by default.
Device and app basics
The app stores its session tokens in your device's secure keychain and keeps minimal checkout-recovery state so an interrupted payment can resolve honestly. We do not read your contacts, photos, or location.
What we don't do
We do not sell your personal information. We do not share it for cross-context behavioral advertising. There are no third-party ad networks or cross-app trackers in the product. The website uses first-party product analytics (PostHog) to understand how pages are used; it runs without tracking cookies and its data stays ours. Because we neither sell nor share personal information in those senses, there is nothing to opt out of, and that is by design.
Why we use your information
To run the service you asked for: taking and managing bookings, processing payments through our processors, running memberships and rewards, powering the community features you use while signed in, sending transactional messages like booking confirmations and one-time cancellation codes, keeping the platform secure, and meeting legal obligations such as payment records.
Who processes it for us
Clerk · fan identity and sign-in sessions
Google · sign-in identity; studio calendar sync for bookings
Stripe · payments, memberships, and payout accounts (hosted checkout; card data never touches our servers)
WorkOS · studio-operator identity and organization membership
Expo · app build and update delivery
Resend · transactional email (booking confirmations, one-time codes, receipts)
PostHog · first-party product analytics on the website, configured without tracking cookies (memory-only); not present in the mobile apps
Sentry · server-side error monitoring
Google user data
Signing in with Google. When you choose Google sign-in, Google shares your name, email address and profile photo with our identity provider (Clerk), which passes them to us to create and run your account. We use them for nothing else.
Studio calendar sync. When a studio operator connects one of their rooms to Google Calendar, we ask for one permission, to view and edit events on the calendar they choose for that room (their main calendar if they do not choose one). We use it to add confirmed sessions to that calendar and to read the events on it, so those hours close on the public booking page. For events the studio adds by hand, we keep the event title so its staff can see why an hour is closed. We keep an encrypted refresh token for that room only. We never read calendars that were not connected and never send mail from the Google account. We never show event details to anyone outside the studio that connected the calendar; the public booking page only shows that an hour is unavailable.
YouTube. When an artist connects their YouTube channel, we read its ID, handle and title once, to confirm the channel is theirs before showing their live streams on our site. When the studio connects its own channel, we also read its subscriber, view and video counts for our marketing dashboard, and, after a staff member approves a post, upload that video to the studio's channel. We store an encrypted access credential and the channel's public details, and nothing else from YouTube. Our use of information received from YouTube API Services follows the Google API Services User Data Policy, including the Limited Use requirements, and Google's Privacy Policy (https://policies.google.com/privacy). An artist can remove their channel at any time on their Connections page, and anyone can revoke our access at https://security.google.com/settings/security/permissions.
We do not sell Google user data, use it for advertising, or let people read it except where needed for security, to comply with the law, or with your permission. Disconnecting the room in the studio console, or removing Audio Lounge at myaccount.google.com/permissions, stops access.
Audio Lounge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
TikTok
When an artist connects their TikTok account, we read their public profile (username, display name, avatar, bio and profile link), their follower, likes and video counts, and the views, likes, comments and shares on their own videos. We use this only to show the artist and our team how their music is performing, and to fill profile fields the artist left empty. We store an encrypted access credential and these figures. We never post to TikTok on anyone's behalf. An artist can disconnect from their Connections page, or remove Audio Lounge's access in TikTok's settings.
Your rights
California residents have these rights under the CCPA/CPRA; we extend them to everyone:
- Know what personal information we hold about you and ask for a copy of it.
- Delete your account and its personal information. Deletion is built into the product: the native app's Account tab and the account-deletion page both start it, and it revokes access across the platform.
- Correct information that is wrong. Most identity fields you can change yourself; anything else, ask us.
- Not be discriminated against for exercising any of these rights: same service, same prices.
To exercise any of them, use the account deletion page or email info@audioloungela.com. We verify requests against the signed-in account or the booking email they concern.
Retention
We keep your information while your account is active. Deleting your account revokes access and removes your identity from the platform; records we are required to keep, such as payment and tax records, are retained for as long as the law requires and no longer.
Children
The service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.
Security
Traffic is encrypted in transit. Sessions live in your device's secure keychain, stored calendar credentials are encrypted at rest, tenant data is isolated at the database layer, and administrative access requires explicit, role-checked authorization. No system is perfectly secure, but security failures here are treated as defects and fixed like them.
Changes
When this policy changes materially, we will update the effective date above and note the change prominently on this page. Continued use after a change means the current policy applies.
Audio Lounge, LLC · 3599 Cahuenga Blvd, Los Angeles, CA · info@audioloungela.com. See also the Terms of Service and the DMCA / Copyright Policy.